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AMENDMENTS TO CLAIMS 

Claim 1 (currently amended): A method for digitally signing a message, the 
method comprising: 

providing a message digest (M x , M z ); 

providing a modulus N of length n bits ; 

providing a number V in the ring Z N , wherein for another number S 
in the ring Z N , V-S 2 =l in Z N ; 

providing two numbers u and v, such that the following conditions 

are satisfied for u and v: 

the sum of u and v is close to n; 

u is greater than or equal to n/2; and 

v is neither close to 0 nor close to n; 

finding three numbers x, v, and z. such that the following conditions 

are satisfied for x, v and z: 

0<=x<2 u : 

0 <= z < 2 V : and 

(M. ± x) 2 - V-v 2 = 4<(M Z + z) in ; 

solving th e e quation (M^ -Mfc) 2 — V-y 2 ~ 4 - (Mg + z) in Z^to produc e 
x, y, and z; and 

assigning a value comprising an ordered triple (x,y,z) as the 
signature ( SIG) as th e signatur e of (M x , M z ), wher e in SIG comprises (x,y) thereby 
digitally signing the message . 

Claim 2 (cancelled) 

Claim 3 (currently amended): The method according to claim 1 and wherein 
the finding solving comprises the following: 

a) choosing a first number a and a second number p in Z such that 0 < a < 
p < 2^ and gcd(a, p) = 1 in Z; 



3 



USSN 10/062,001 
Reply to Office Action dated 13 July 2005 

b) choosing a third number y in Z such that 2*^ 2 uA <y<2**2 u 
andp|(a-N + y)in Z; 

c) setting a fourth number R equal to (oc-N + y) / p in Z; 

d) setting a fifth number T equal to -(M z -R + M x + R' 1 ) in Z N ; 

e) if (3 = 1 or T < 8-y (in Z), setting a sixth number U and a seventh 
number W equal to 0 and continuing with step k; 

f) setting an eighth number D equal a' 1 in Z p ; 

g) setting a ninth number A equal to N / P in Z; 

h) setting a tenth number B equal to (T - 8-y) / A in Z; 

i) setting U equal to B-D in Z p ; 
j) setting W equal to UR in Z N ; 

k) setting an eleventh number C equal to (T - W) / y in Z; 
1) setting z equal to U + p-C in Z N ; 
m) setting x equal to T - z-R in Z N ; and 
n) setting y equal to S-(x + M x + 2-R" 1 ) in Z N , 
thereby producing x, y, and z. 

Claim 4 (original): The method according to claim 3 and also comprising: 

providing a trusted computation device and a non-trusted 
computation device, 

wherein step d) comprises performing a computation in the non- 
trusted computation device. 

Claim 5 (original): The method according to claim 4 and wherein the 
computation in the non-trusted computation device comprises a computation of 
R 1 . 

Claim 6 (original): The method according to claim 5 and wherein the 
computation in the non-trusted computation device is protected from tampering by 
performing a blinding method in the trusted computation device. 
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Claim 7 (original): The method according to claim 6 and also comprising 
verifying a result of the computation in the non-trusted computation device. 

Claim 8 (original): The method according to claim 3 and wherein step a) 
comprises screening a and p. 

Claim 9 (original): The method according to claim 8 and wherein the screening 
comprises reducing a and P modulo 210. 

Claim 10 (original): The method according to claim 9 and wherein the reducing a 
and p modulo 210 comprises: 

computing gcd(210, (a mod 210), (p mod 210)) to produce a result; 

and 

rejecting a and p and choosing another a and p if the result is not 

equal to 1. 

Claim 1 1 (currently amended): The method according to claim 1 and wherein 
the finding solving comprises the following: 

a) sotting a equal to 0; 
b) sotting p-1; 

[[c]]a) choosing a first number y such that 2^ 2 U ~* <y<2**2 u ; 

[[d]]b) setting a second number T equal to -(M z -y + M x + y' 1 ) in Z N ; 

[[e]]c) setting z equal to T / y in Z; 

[[f]]d) setting x equal to T - z-y in Z N ; and 

[[g]]e) setting y equal to S-(x + M x + 2-y' 1 ) in Z N , 
thereby producing x, y, and z. 

Claim 12 (currently amended): The method according to claim 11 and also 
comprising: 

providing a trusted computation device and a non-trusted 
computation device, 
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wherein step [[d]]b) comprises performing a computation in the 
non-trusted computation device. 

Claim 13 (original): The method according to claim 12 and wherein the 
computation in the non-trusted computation device comprises a computation of y" 1 . 

Claim 14 (original): The method according to claim 13 and wherein the 
computation in the non-trusted computation device is protected from tampering by 
performing a blinding method in the trusted computation device. 

Claim 15 (original): The method according to claim 14 and also comprising 
verifying a result of the computation in the non-trusted computation device. 

Claim 16 (cancelled) 

Claim 17 (new): The method according to claim 1 and wherein the method is 
implemented in a computing device. 
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